Security

IDS / IPS

Also written as IDS, IPS, Intrusion Detection System, Intrusion Prevention System, Snort, Suricata, Zeek

Systems that watch network traffic for signs of an attack. An IDS (intrusion detection system) raises an alert; an IPS (intrusion prevention system) also blocks the traffic. Snort, Suricata and Zeek are well-known open-source tools, and most modern firewalls include IPS features.

Think of it like

The IDS is the security camera that sounds an alarm; the IPS is the guard who also locks the door.

Junior or senior?

Common in SOC and network security roles.

Senior sounds like

Has tuned rules to cut false alarms and can walk through a real alert they investigated from start to finish.

Ask them

“How many alerts did your IDS raise on a typical day, and what did you do to reduce the noise?”